City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.66.235.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48082
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.66.235.105. IN A
;; AUTHORITY SECTION:
. 461 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 14:11:57 CST 2022
;; MSG SIZE rcvd: 107105.235.66.104.in-addr.arpa domain name pointer a104-66-235-105.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
105.235.66.104.in-addr.arpa name = a104-66-235-105.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.82.86.117 | attack | Automatic report - Port Scan Attack |
2019-10-07 01:51:00 |
| 123.31.47.20 | attackbotsspam | 2019-10-06 15:40:48,425 fail2ban.actions \[1778\]: NOTICE \[sshd\] Ban 123.31.47.20 2019-10-06 16:21:20,112 fail2ban.actions \[1778\]: NOTICE \[sshd\] Ban 123.31.47.20 2019-10-06 16:57:58,743 fail2ban.actions \[1778\]: NOTICE \[sshd\] Ban 123.31.47.20 2019-10-06 17:34:37,512 fail2ban.actions \[1778\]: NOTICE \[sshd\] Ban 123.31.47.20 2019-10-06 18:11:23,084 fail2ban.actions \[1778\]: NOTICE \[sshd\] Ban 123.31.47.20 ... |
2019-10-07 01:35:29 |
| 190.153.178.46 | attackspam | SSH invalid-user multiple login attempts |
2019-10-07 01:58:34 |
| 185.175.93.103 | attackbotsspam | 10/06/2019-18:46:50.985934 185.175.93.103 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-07 01:37:17 |
| 52.163.221.85 | attackspambots | Oct 6 07:25:02 php1 sshd\[6499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.221.85 user=root Oct 6 07:25:05 php1 sshd\[6499\]: Failed password for root from 52.163.221.85 port 47706 ssh2 Oct 6 07:29:24 php1 sshd\[6925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.221.85 user=root Oct 6 07:29:25 php1 sshd\[6925\]: Failed password for root from 52.163.221.85 port 32792 ssh2 Oct 6 07:33:45 php1 sshd\[7454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.221.85 user=root |
2019-10-07 01:43:16 |
| 166.62.80.109 | attack | WordPress wp-login brute force :: 166.62.80.109 0.120 BYPASS [06/Oct/2019:22:41:36 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-07 01:23:09 |
| 86.106.4.72 | attack | Automatic report - Port Scan Attack |
2019-10-07 01:21:30 |
| 104.248.16.13 | attackspam | wp4.breidenba.ch 104.248.16.13 \[06/Oct/2019:13:41:34 +0200\] "POST /wp-login.php HTTP/1.1" 200 5600 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" wp4.breidenba.ch 104.248.16.13 \[06/Oct/2019:13:41:34 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4080 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-07 01:25:37 |
| 116.20.61.205 | attack | Port 1433 Scan |
2019-10-07 01:36:30 |
| 41.203.76.251 | attackbots | 2019-10-06T15:11:50.238112hub.schaetter.us sshd\[23011\]: Invalid user ts3 from 41.203.76.251 port 56524 2019-10-06T15:11:50.249158hub.schaetter.us sshd\[23011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.203.76.251 2019-10-06T15:11:50.367986hub.schaetter.us sshd\[23013\]: Invalid user judge from 41.203.76.251 port 58134 2019-10-06T15:11:50.373426hub.schaetter.us sshd\[23013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.203.76.251 2019-10-06T15:11:50.375161hub.schaetter.us sshd\[23015\]: Invalid user minerhub from 41.203.76.251 port 59744 2019-10-06T15:11:50.379916hub.schaetter.us sshd\[23015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.203.76.251 ... |
2019-10-07 01:21:50 |
| 182.61.109.92 | attack | Oct 6 13:37:58 TORMINT sshd\[9299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.109.92 user=root Oct 6 13:38:01 TORMINT sshd\[9299\]: Failed password for root from 182.61.109.92 port 41260 ssh2 Oct 6 13:42:14 TORMINT sshd\[9525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.109.92 user=root ... |
2019-10-07 01:49:12 |
| 185.5.248.133 | attackspam | Oct 6 04:55:30 auw2 sshd\[8251\]: Invalid user P@\$\$wort from 185.5.248.133 Oct 6 04:55:30 auw2 sshd\[8251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.5.248.133 Oct 6 04:55:32 auw2 sshd\[8251\]: Failed password for invalid user P@\$\$wort from 185.5.248.133 port 42295 ssh2 Oct 6 05:00:26 auw2 sshd\[8671\]: Invalid user Citroen-123 from 185.5.248.133 Oct 6 05:00:26 auw2 sshd\[8671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.5.248.133 |
2019-10-07 01:52:51 |
| 167.86.89.177 | attackspam | port scan and connect, tcp 8080 (http-proxy) |
2019-10-07 01:42:09 |
| 154.127.59.254 | attack | Automatic report - Banned IP Access |
2019-10-07 01:44:36 |
| 142.93.26.245 | attackbotsspam | Oct 6 15:09:41 *** sshd[29752]: User root from 142.93.26.245 not allowed because not listed in AllowUsers |
2019-10-07 01:35:07 |